What is a common mistake with encryption and key management in Cloud Security?

Hard-coding keys or secrets in source code and never rotating them defeats many benefits of encryption.